CRITICAL 9.3 NVD

CVE-2026-16626

Improper restriction of XML external entity reference vulnerability (unauthenticated) in Jaspersoft JasperReports Server. This issue affects JasperReports Serv

Improper restriction of XML external entity reference vulnerability (unauthenticated) in Jaspersoft JasperReports Server. This issue affects JasperReports Server: from 9.0.0 before HF-9 and from 10.0.0 before HF-10.

References

https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-august-05-2026-ja

Published: 2026-08-10 · Source: NVD · Feed updated: 2026-08-10

This critical severity vulnerability with a CVSS score of 9.3 was published on 2026-08-10 via NVD.

Risk Timeline

CVE Disclosed2026-08-10 · -1 days ago

Remediation Resources

Official Advisory

community.jaspersoft.com/advisories/jaspersoft-security-advisory-augus

vulnfeed aggregates 7833 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.